Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80966667-e6df-4a84-a91e-10054d3673cd.roa
File: 80966667-e6df-4a84-a91e-10054d3673cd.roa (raw, json)
Hash identifier: KqLgiL2IYyTeWoYvVPtdspb+FgRy/lRJMmCr3v8Cn0g=
Subject key identifier: C0:AE:AC:FC:E2:C6:7C:A7:8E:98:52:FF:90:80:22:E4:F4:51:07:F5
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1A1D04F876015D74597B42E64161656E0C206232
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80966667-e6df-4a84-a91e-10054d3673cd.roa
Signing time: Fri 03 Oct 2025 00:22:56 +0000
ROA not before: Fri 03 Oct 2025 00:22:56 +0000
ROA not after: Fri 07 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 54.32.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:1d:04:f8:76:01:5d:74:59:7b:42:e6:41:61:65:6e:0c:20:62:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 3 00:22:56 2025 GMT
Not After : Nov 7 23:59:59 2025 GMT
Subject: serialNumber=2598b7d14380f455f62875a01e3f42a7ca4247976be83c42862e0fdfc7379427, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3b:02:ef:1d:2b:9f:8e:ab:cf:68:7f:62:ca:
6f:ef:4d:4f:a1:60:1a:5e:11:f6:b2:f4:6d:e7:a9:
47:11:ee:3a:7a:39:ec:2e:51:75:bf:f7:25:0f:c7:
6c:c1:73:d3:34:f8:05:8d:ea:05:0b:19:f4:dc:ba:
c0:1a:3f:22:38:bb:e3:41:9b:72:17:82:8c:96:f5:
19:df:94:ee:69:ac:c2:2d:a9:32:7b:e7:ee:a3:fd:
51:be:fc:bc:de:40:96:ea:6d:88:dd:5a:9a:ea:52:
cf:32:25:c0:e1:37:ba:30:22:a6:7a:69:31:1f:f5:
31:65:be:cd:da:f1:ac:ee:1c:57:3d:6b:1b:50:fc:
c1:23:8c:77:9d:35:d9:db:8b:dd:f9:50:ce:d7:07:
ea:33:35:67:73:46:c9:3d:36:6c:04:90:0a:28:29:
46:59:ed:de:93:53:ba:1b:e8:45:93:c9:7f:8b:88:
3b:89:a5:5d:9c:15:50:43:7b:6b:c6:b5:5c:15:b7:
fe:3f:45:47:16:0c:b5:5d:4c:a1:a6:5c:f9:58:bf:
d4:ec:91:82:1b:1c:0c:84:68:79:20:db:96:49:58:
4d:39:33:4a:32:6d:92:48:7b:e7:7d:18:ed:00:40:
28:ee:ef:a1:ad:53:09:c8:9c:92:9d:66:3f:58:ba:
68:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:AE:AC:FC:E2:C6:7C:A7:8E:98:52:FF:90:80:22:E4:F4:51:07:F5
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80966667-e6df-4a84-a91e-10054d3673cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.32.0.0/16
Signature Algorithm: sha256WithRSAEncryption
03:86:ed:72:2b:c8:e3:33:03:bf:7a:0a:ea:82:8d:84:fb:1b:
61:bf:1b:89:4c:d0:b9:7d:09:f5:bc:9a:ea:88:6d:c8:2c:dc:
ef:6a:0e:3c:8b:cd:e0:70:75:a4:f5:6a:9a:c6:12:73:a0:b2:
f5:db:07:24:4c:10:85:c8:c1:b8:e7:3d:a8:38:fe:04:18:b0:
b9:17:65:07:18:35:9f:c4:b3:57:87:73:0c:c0:30:54:08:77:
91:3d:96:73:81:48:ee:a5:ed:84:40:c6:3d:8c:5d:25:cb:57:
1e:f6:ba:b6:3b:72:f7:9c:83:37:d5:9a:f1:f8:07:8c:2d:d7:
4c:30:81:88:25:77:2c:f9:ba:3a:de:9a:ac:7a:e6:9a:49:c4:
1b:6b:85:8c:29:28:62:cc:e8:98:75:fc:d5:74:1a:6e:96:71:
e9:19:39:a1:4c:24:ae:5a:04:c8:39:8e:53:c7:a4:17:d9:03:
06:8a:7c:b8:bc:a4:f6:04:a6:1b:60:a5:4d:70:cc:4e:12:57:
03:67:65:21:67:f6:c7:fe:14:d6:c3:50:e7:ed:c5:26:1e:da:
a0:e5:48:b0:dd:90:5f:1f:7b:57:71:7f:86:54:f8:4b:94:f7:
6b:15:f7:7a:48:11:e1:16:0d:ec:c4:5f:c5:a9:31:30:c0:3f:
7b:9a:04:52
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUGh0E+HYBXXRZe0LmQWFlbgwgYjIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDAzMDAyMjU2WhcNMjUxMTA3MjM1OTU5
WjB6MUkwRwYDVQQFE0AyNTk4YjdkMTQzODBmNDU1ZjYyODc1YTAxZTNmNDJhN2Nh
NDI0Nzk3NmJlODNjNDI4NjJlMGZkZmM3Mzc5NDI3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDIOwLvHSufjqvPaH9iym/vTU+hYBpeEfay9G3nqUcR7jp6
OewuUXW/9yUPx2zBc9M0+AWN6gULGfTcusAaPyI4u+NBm3IXgoyW9RnflO5prMIt
qTJ75+6j/VG+/LzeQJbqbYjdWprqUs8yJcDhN7owIqZ6aTEf9TFlvs3a8azuHFc9
axtQ/MEjjHedNdnbi935UM7XB+ozNWdzRsk9NmwEkAooKUZZ7d6TU7ob6EWTyX+L
iDuJpV2cFVBDe2vGtVwVt/4/RUcWDLVdTKGmXPlYv9TskYIbHAyEaHkg25ZJWE05
M0oybZJIe+d9GO0AQCju76GtUwnInJKdZj9YumhtAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUwK6s/OLGfKeOmFL/kIAi5PRRB/UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzgwOTY2NjY3LWU2ZGYtNGE4NC1hOTFlLTEwMDU0ZDM2NzNjZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA2IDANBgkqhkiG9w0BAQsFAAOCAQEAA4btcivI4zMDv3oK6oKNhPsbYb8b
iUzQuX0J9bya6ohtyCzc72oOPIvN4HB1pPVqmsYSc6Cy9dsHJEwQhcjBuOc9qDj+
BBiwuRdlBxg1n8SzV4dzDMAwVAh3kT2Wc4FI7qXthEDGPYxdJctXHva6tjty95yD
N9Wa8fgHjC3XTDCBiCV3LPm6Ot6arHrmmknEG2uFjCkoYszomHX81XQabpZx6Rk5
oUwkrloEyDmOU8ekF9kDBop8uLyk9gSmG2ClTXDMThJXA2dlIWf2x/4U1sNQ5+3F
Jh7aoOVIsN2QXx97V3F/hlT4S5T3axX3ekgR4RYN7MRfxakxMMA/e5oEUg==
-----END CERTIFICATE-----
Generated at Wed Oct 8 19:42:51 2025 by rpki-client